[Samba] R: R: R: winbindd no access console with root

[Corrado Ravinetto]

Many many thanks Rowland, now it's working

-----Messaggio originale-----
Da: samba <samba-bounces at lists.samba.org> Per conto di Rowland Penny via samba
Inviato: giovedì 22 dicembre 2022 12:35
A: samba at lists.samba.org
Cc: Rowland Penny <rpenny at samba.org>
Oggetto: Re: [Samba] R: R: winbindd no access console with root



On 22/12/2022 10:57, Corrado Ravinetto via samba wrote:

>> There is an obvious reason why 'root' isn't working, perhaps you will understand why after reading this:
>
>> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#
>> Configuring_Samba
>
> I red this, but my Domain User have rid = 503 and all users have like
> primarygroup 503 Then i can't change this to all my users.
> I haven't unix user, only my linux user is root thai i use to manage
> my linux box So what can i change to use ONLY root as account ??

Start the domain range at '500' instead of '0'
Add these lines to your smb.conf:

username map = /usr/local/samba/etc/user.map min domain uid = 0

Create /usr/local/samba/etc/user.map containing this:

!root = LXCERRUTI\Administrator

Reload the Samba config or restart Samba.

Run 'net cache flush'

You should now be able to use ' root' on Linux, Administrator from Windows will be mapped to root.

If you have given Administrator  a uidNumber and/or a gidNumber, you should remove them.


>
>> Do you still have any pre-vista Windows machines in your domain ?
>> If not, you can remove all the SMBv1 lines.
>
> Yes, too much xp ☹

I don't know if you noticed, but XP is dead, it had a nice funeral :-D

Rowland

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Lanificio F.lli CERRUTI]


Corrado Ravinetto
Sistemi informativi
corrado.ravinetto at lanificiocerruti.com <mailto:corrado.ravinetto at lanificiocerruti.com>
T: +39 015 3591283
[Lanificio F.lli CERRUTI]
Lanificio F.lli Cerruti S.p.A.
Via Cernaia 40, 13900 - Biella (BI) Italy
www.lanificiocerruti.com <http://www.lanificiocerruti.com/>

[Twitter] <https://twitter.com/Lan_Cerruti> [Facebook]  <https://www.facebook.com/LanificioCerruti> [Instagram]  <https://www.instagram.com/lanificiocerruti/>

Rispetta l'ambiente, non stampare questa mail se non necessario
Respect the environment, don't print unless necessary

[Unesco]